This change fixes the following lint errors discovered since we removed
pin of lint packages.
manifests/config.pp:20:WARNING: Duplicate class parameter documentation
for freezer::config::freezer_config
manifests/config.pp:7:WARNING: Duplicate class parameter documentation
for freezer::config::freezer_config
manifests/init.pp:7:WARNING: No matching class parameter for
documentation of freezer::sample_parameter
Change-Id: I4f4c5688f60bfe9161f4a4827f8ebe1bc6d1b8f6
This patch makes it possible to override the current service default,
which is /etc/<service>/policy.d .
Change-Id: Iaffada6b0cd29e880a65ce9205b87b94940e47b7
As Openstack projects continue to have longer database migration
chains, the Puppet default timeout of 300 seconds for an execution
is becoming too short a duration on some hardware, leading to timeouts.
As projects continue to add more migration scripts without pruning
the base, timeouts will continue to become more frequent unless
this time can be expanded.
Change-Id: Ic3dee0bf0a73c57f24c446620e206c4f4a94c600
Closes-Bug: #1904962
Currently we validate database_connection in 2 layers, each puppet
modules and puppet-oslo, however this makes it difficult to maintain
validation pattern because we always need to fix both.
This patch removes the validation from each puppet modules so that
we need to maitain only one place, puppet-oslo to update validation
logic.
Change-Id: I9cd6c86e873f7dec55c0bb68cb4d40fe0b7fc1e5
This patch adds support for [keystone_authtoken] interface parameter,
so that operators can define which endpoint should be used by authtoken
middleware.
Change-Id: I451c224457b20f01c72283ca022024679aff9d07
... and migrate it to openstacklib so that all logics about database
configuration are implemented in one common place.
Depends-on: https://review.opendev.org/#/c/728595/
Change-Id: Ie66552bc2a4447abca9d685e461ac3837568583d
The deprecated pki related options check_revocations_for_cached and
hash_algorithms option has been removed.
Change-Id: I0715ea7a8b578155efaebcc68072556292359610
This changes all the puppet 3 validate_* functions
to use the validate_legacy function.
The validate_legacy function has been available since
about three years but require Puppet >= 4.4.0 and since
there is Puppet 4.10.12 as latest we should assume people
are running a fairly new Puppet 4 version.
This is the first step to then remove all validate function
calls and use proper types for parameter as described in spec [1].
[1] https://review.openstack.org/#/c/568929/
Change-Id: I62d32faa75928ecca27a10480ce8823aaa03fafb
Service_token_roles_required missing in the server config file which
allows backwards compatibility to ensure that the service tokens are
compared against a list of possible roles for validity.
Change-Id: I95089f9f1d5039d7d14e3850535536ec1804fdb1
Closes-Bug: 1778198
Make sure documentation is the same and follow
the standard which we are trying to enforce on
all modules.
Change-Id: Ie6215020ef9530f0c61efa5fbc1f3a225dce5a9c
check_revocations_for_cached and hash_algorithms are deprecated for
removel because of PKI token format is no longer supported.
Update warning message and add a release note.
Change-Id: I590241e0dca24ffa5dc084576fd72eb171905582
Closes-Bug: #1804562
Closes-Bug: #1804720
Now that the v2.0 API has been removed, we don't have a reason to
include deployment instructions for two separate applications on
different ports.
Change-Id: Ie35bd3c522886eb696facde338b8f42785a904ac
Option auth_uri from group keystone_authtoken is deprecated[1].
Use option www_authenticate_uri from group keystone_authtoken.
[1]https://review.openstack.org/#/c/508522/
Change-Id: I9966c0443f8199c31a66adc1465c6336a7c71dd7
Depends-On: I4c82a63baabd6b9304b302c97cd751a0103d8316
Closes-Bug: #1759098
Add pool_timeout option to configure this value for pool_timeout with
SQLAlchemy.
Change-Id: Ieec85a15c5af99bf15c26bb6271013ee1d9e433c
Closes-Bug: #1757581
In order to make easy orchestration on all OpenStack db-sync, add this
tag so people can use this tag in composition layer.
A use case it to set some orchestration to make sure MySQL Galera is
ready before running any Exec with this tag.
Change-Id: I39bccb5d538885c827b26b826029b4f8dfcfcd42
Closes-Bug: #1755102
The move of policy.json into code means the file may not exist. We've
added support to ensure that the file exists in the openstacklib but we
need to make sure the permissions are right for each service. This adds
the group information to the policies so it works right.
Depends-On: I26e8b1384f4f69712da9d06a4c565dfd1f17c9ed
Change-Id: I998405939f2481438eb73b5cee2e595fc34073b5
Co-Authored-By: Alex Schultz <aschultz@redhat.com>
Keystone v2.0 API was removed so we have no choice but configuring
user_domain_name and project_domain_name otherwise it fallbacks to
Keystone v2.0 and it fails. This patch sets the default value so we make
sure Keystone v3 will be used out of the box for our users.
Change-Id: I47db3ba0ec57c33f99d8256dda6878c5a244522e
Takashi Kajinami